[OR] [LSEG] [E2] [P1 to P3] [C1] OR Planning Methodology

Introduction to the London Stock Exchange Group’s Operational Resilience Planning Methodology

Introduction

For a global financial markets infrastructure and data organisation such as London Stock Exchange Group (LSEG), operational resilience is a strategic capability rather than simply a compliance initiative.

LSEG operates across multiple interconnected services, including capital markets, post-trade infrastructure, financial data and analytics, indices, technology platforms, and risk intelligence services, supporting financial institutions, regulators, investors, and market participants globally.

Given the systemic importance of these services, disruptions arising from cyber threats, technology failures, third-party dependencies, operational incidents, geopolitical developments, or market events can have significant consequences beyond the organisation itself.

As a result, operational resilience requires a structured, enterprise-wide approach that enables LSEG to anticipate disruptions, withstand operational stress, recover critical services within acceptable limits, and continuously strengthen resilience capabilities.

To support this objective, LSEG’s Operational Resilience Planning Methodology adopts a structured three-phase lifecycle comprising Plan, Implement, and Sustain.

These phases create a practical framework that enables resilience activities to progress from strategic assessment and governance, to implementation and operational execution, and ultimately to continuous improvement and organisational embedding.

The methodology recognises that resilience is not a one-time project but an ongoing capability requiring periodic reassessment, testing, adaptation, and cultural reinforcement.

Purpose of the Chapter

This chapter serves as an introduction to the overall Operational Resilience Planning Methodology for LSEG and provides readers with an understanding of how resilience activities are organised into a structured implementation lifecycle.

The purpose is to establish the rationale behind adopting a phased operational resilience approach and explain how each stage contributes toward protecting LSEG’s critical business services and maintaining confidence in the financial ecosystem.

Before progressing into detailed implementation topics, readers should understand the sequence, objectives, and interrelationships among the three phases.

Upon completing this chapter, readers are expected to understand the purpose of each phase, recognise how the stages build resilience maturity over time, and appreciate the governance, operational, and cultural considerations necessary to sustain resilience within a complex and globally interconnected organisation.

Overview of the Three Operational Resilience Planning Methodology Phases

The Operational Resilience Planning Methodology for LSEG consists of three integrated phases:

• Phase 1: Plan → Establish strategic foundations and governance

• Phase 2: Implement → Execute operational resilience activities and validate resilience capabilities

• Phase 3: Sustain → Embed resilience into organisational culture and continuous improvement

These phases collectively ensure that resilience initiatives evolve from assessment to implementation and become embedded within everyday operations.

Phase 1: Plan

Establishing the Strategic Foundation for Operational Resilience

The Plan phase establishes the baseline capabilities, governance structures, and strategic direction required to support operational resilience implementation.

It enables LSEG to assess current readiness levels and determine future-state resilience objectives.

The five stages are:

Stages in Phase 1: Plan 

• Stage 1: Assess Capability and Maturity [Plan Phase – Stage 1]
  Evaluate LSEG’s existing resilience capabilities, practices, processes, and operating maturity across areas such as business continuity, cyber resilience, operational risk, crisis management, and third-party risk management.

• Stage 2: Analyse Gap [Plan Phase – Stage 2]
  Identify differences between current operational resilience capabilities and target-state requirements, considering regulatory expectations and strategic objectives.

• Stage 3: Develop Strategy and Roadmap [Plan Phase – Stage 3]
  Define a structured implementation roadmap containing priorities, initiatives, milestones, resources, and timelines required for resilience enhancement.

• Stage 4: Confirm Risk Appetite [Plan Phase – Stage 4]
  Determine acceptable levels of operational disruption risk and align resilience objectives with LSEG’s broader enterprise risk appetite.

• Stage 5: Develop and Embed Governance [Plan Phase – Stage 5]
  Establish governance structures, roles, responsibilities, ownership models, escalation procedures, and decision-making processes necessary to oversee resilience initiatives.

  Expected outcome: A defined strategic framework and governance foundation supporting operational resilience implementation.

Phase 2: Implement

Executing Operational Resilience Capabilities

The Implement phase operationalises resilience concepts into practical activities and measurable outputs.

This phase focuses on identifying critical services, understanding dependencies, defining acceptable disruption thresholds, and validating resilience through testing.

The five stages are:

Stages in Phase 2: Implement 

• Identify Critical Business Services [Implement Phase – Stage 1]
  Determine the business services whose disruption would create unacceptable harm to customers, market participants, financial stability, or regulatory obligations.

• Map Processes and Resources [Implement Phase – Stage 2]
  Document interconnections and dependencies across:

• • People

  • Processes

  • Technology

  • Facilities

  • Data

  • Third parties

This activity enables visibility into operational vulnerabilities and concentration risks.

• Set Impact Tolerance [Implement Phase – Stage 3]
  Define the maximum acceptable level of disruption before severe consequences occur.
  

Impact tolerance considerations may include:

• • Service unavailability duration

  • Data loss thresholds

  • Customer impact

  • Market impact

  • Financial impact

  • Regulatory consequences

• Conduct Scenario Testing [Implement Phase – Stage 4]
  Design and execute severe but plausible disruption scenarios to validate resilience assumptions and identify operational weaknesses.

Examples include:

• • Cyber incidents

  • Technology failures

  • cloud service outages

  • third-party disruption

  • market infrastructure failures

  • geopolitical events

• Improve Lesson Learned [Implement Phase – Stage 5]
  

  Capture observations from exercises, incidents, and testing activities and transform findings into improvement initiatives.

  Expected outcome: Operational resilience capabilities become measurable, tested, and evidence-driven.

Phase 3: Sustain

Embedding Resilience Across the Organisation

Long-term resilience requires continuous reinforcement and organisational adoption. The Sustain phase ensures resilience becomes part of LSEG’s operating culture and continuous improvement process.

The five stages are:

Stages in Phase 3: Sustain 

• Introduce Cultural Change [Sustain Phase – Stage 1]
  Promote resilience behaviours and leadership accountability across all business functions.

• Develop Communication Strategy [Sustain Phase – Stage 2]
  Create communication mechanisms that sustain awareness, reporting, stakeholder engagement, and resilience messaging.

• Implement Training and Awareness [Sustain Phase – Stage 3]
  Provide structured programmes to build knowledge, skills, and resilience competencies throughout the organisation.

• Provide Self-assessment [Sustain Phase – Stage 4]
  Enable business units and service owners to periodically assess resilience effectiveness and maturity progression.

• Conduct Independent Quality Review [Sustain Phase – Stage 5]
  Perform independent assessments to validate implementation quality, identify gaps, and provide assurance to management and regulators.
  
  Expected outcome: Operational resilience becomes embedded within organisational culture and continuously evolves through structured review and enhancement.
  
  

LSEG’s three-phase Operational Resilience Planning Methodology provides a structured and sustainable approach for building resilience capabilities across a complex and globally interconnected financial ecosystem.

The Plan phase establishes strategic direction, the Implement phase translates strategy into operational capability, and the Sustain phase embeds resilience into organisational culture and continuous improvement.

Together, these phases create a repeatable lifecycle that strengthens LSEG’s ability to anticipate disruption, maintain critical business services, recover effectively, and support confidence across the financial markets ecosystem.

Blogs marked [x] are under construction

ebook 2: Implementing Operational Resilience
C1	C2 [x]	C8 [x]	C14 [x]

	ebook 2: Implementing Operational Resilience
	BSP OR Policy	eBook 1	eBook 2	eBook 3	C20 [x]	C21 [x]
	"Plan" Phase of the Operational Resilience Planning Methodology
	C2 [x]	C3 [x]	C4 [x]	C5 [x]	C6 [x]	C7 [x]
	"Implement" Phase of the Operational Resilience Planning Methodology
	C8 [x]	C9 [x]	C10 [x]	C11 [x]	C12 [x]	C13 [x]
	"Sustain" Phase of the Operational Resilience Planning Methodology
	C14 [x]	C15 [x]	C16 [x]	C17 [x]	C18 [x]	C19 [x]

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.